ServiceNow Inc. entered advanced negotiations to acquire identity security startup Veza for more than one billion dollars, according to reports published on November 26, 2025. The ServiceNow acquisition represents a strategic expansion into authorization intelligence and machine identity management, addressing critical gaps in AI-powered enterprise security platforms.
The deal values Veza at over four times its total funding raised since inception in 2020. Veza secured approximately 235 million dollars across multiple investment rounds, with backing from prominent technology companies including Workday, Salesforce, and Alphabet’s GV fund. The startup employed more than 190 personnel as of April 2025 and manages over 20 billion permissions for enterprise customers.
Strategic Platform Consolidation Accelerates
The ServiceNow acquisition follows the company’s 2.85 billion dollar purchase of Moveworks announced in March 2025, which integrated AI assistants and enterprise search capabilities into its workflow platform. Adding Veza’s authorization technology creates unified control over AI agents and the sensitive data they access across cloud services, software-as-a-service applications, and internal systems.
Veza specializes in software that maps permissions across enterprise infrastructure, revealing precisely which users, applications, and autonomous AI agents possess access to specific datasets. The platform identifies unused accounts representing potential attack vectors and discovers active accounts with excessive privileges to sensitive systems beyond operational requirements.
Industry analysts emphasize that existing identity and access management tools were designed for human accounts but struggle with machine identities, application programming interface keys, and autonomous agents making real-time decisions without human oversight. This creates blind spots around privilege sprawl and cross-system access pathways that adversaries exploit.
The ServiceNow acquisition directly addresses these emerging vulnerabilities. The company unveiled AI agents for security and risk management at its Knowledge 2025 conference in May, positioning them as tools for autonomous enterprise defense. Veza would provide the authorization controls those security agents require to safely investigate and remediate threats across complex multi-cloud environments.
Technical Integration And Market Impact
Veza treats access as a relationship problem rather than a simple permission list, connecting identities, permissions, and data assets to display effective access instead of theoretical permissions. The platform automatically creates inventories of machine identities that applications utilize to interact with one another, enabling organizations to enforce separation-of-duties policies across both human and non-human accounts.
For the 250-plus joint customers already deploying both platforms, the ServiceNow acquisition would fundamentally change system integration. Enterprises currently run ServiceNow and Veza as separate tools that require manual coordination. Post-acquisition integration would embed deep authorization intelligence directly into ServiceNow’s workflow automation layer.
ServiceNow offers comprehensive cybersecurity features including vulnerability identification, risk-based prioritization, and exploit detection capabilities. However, the platform provided limited functionality for managing user accounts and machine identities before the Veza deal. The acquisition fills this critical gap as enterprises deploy increasing numbers of autonomous AI systems.
Security experts note the deal could reshape the identity security landscape by pulling authorization intelligence into a major enterprise platform instead of maintaining it as a standalone specialty product. Competitors including Salesforce, Microsoft, and Oracle all offer AI agents, but none had combined front-end automation with identity security in the integrated manner ServiceNow is attempting through its recent acquisitions.
Financial Context And Strategic Timing
ServiceNow shares closed at 812.41 dollars on November 28, 2025, representing a 1.2 percent daily gain but remaining approximately 33 percent below the 52-week high of 1,198.09 dollars reached on January 28, 2025. Despite recent price weakness, Wall Street maintains a strong buy consensus with 40 analysts projecting an average target price of 1,159.94 dollars, implying roughly 45 percent upside potential.
The company previously acquired venture-backed data management startup data.world for an undisclosed amount, adding a platform that helps enterprises organize records used in artificial intelligence and analytics projects. That acquisition included cybersecurity controls enabling administrators to regulate employee access to business records.
ServiceNow Ventures initially invested in Veza during an August 2023 funding round alongside Capital One Ventures, signaling strategic interest before formal acquisition discussions commenced. The partnership produced more than 250 shared enterprise customers before the ServiceNow acquisition talks reached advanced stages.
Implementation Timeline And Industry Response
Sources familiar with the negotiations indicated that ServiceNow acquisition could be formally announced as early as the week beginning December 2, 2025, although terms have not yet been finalized. The transaction would reinforce ServiceNow’s strategic focus on becoming the central control plane for artificial intelligence workflows in large enterprises.
The deal arrives as organizations confront mounting complexity in access control driven by AI-driven automation proliferation. Enterprises are deploying autonomous agents that require dynamic access to diverse datasets while maintaining strict governance and audit trails. Traditional identity management architectures designed for static human user populations cannot scale to address these requirements.
Cybersecurity researchers emphasize that the authorization problem extends beyond employee oversight to encompass API keys, service accounts, robotic process automation credentials, and AI agent permissions. Veza’s technology provides visibility into these complex webs of access relationships, enabling security teams to detect anomalous permission chains before attackers exploit them.
The ServiceNow acquisition reflects broader market consolidation as cybersecurity buyers favor integrated platforms over point solutions. Organizations seek to reduce the number of security vendors in their environments while improving interoperability between security controls and business workflow systems.
